CVE ID :CVE-2026-58205 Published : Oct. 27, 2026, 11:17 p.m. | 1 hour, 7 minutes ago Description :GRR is a resource management and reservation application. Prior to version 4.5.0, `maj.php` reflects the `forcemaj` parameter without adequate escaping when installation files remain accessible....

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-58205 - GRR has a Reflected XSS issue

VERWANDTEARTIKEL

CVE-2026-58256 - GRR vulnerable to Remote Code Execution Via PHP Code Injection

CVE-2026-58255 - Cronicle: Non-admin uid/gid injection in create_event/update_event → run-as-arbitrary-user (incl. root) — sibling of CVE-2026-39401

CVE-2026-57191 - Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing

CVE-2026-85898 - Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVE-2026-116692 - MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modules

CVE-2026-116693 - dd-trace: ReDOS in URL query string obfuscation